Privacy Policy

Last Update: 30 Oct 2025

1. Controller and Data Protection Officer

Controller According to the GDPR

Akademie der Künste, represented by Manos Tsangaris
Hanseatenweg 10, 10557 Berlin
info@adk.de

Data Protection Officer

Akademie der Künste – Data Protection Officer
Hanseatenweg 10, 10557 Berlin
datenschutz@adk.de

3. Your Rights

You have the following rights:

  • Right to information ( Article 15 GDPR)
  • Right to rectification (Article 16)
  • Right to erasure (“right to be forgotten”) / blocking ( Article 17)
  • Right to restriction of processing (Article 18)
  • Right to data portability (Article 20)
  • Right to object data processing according to Article 6 (1) (f) (Article 21)
  • Withdrawal of consent at any time with effect for the future ( Article 7 (3))

To exercise your rights, please send an email: datenschutz@adk.de with the subject line “Privacy policy/enquiry” or another appropriate keyword.

4. Hosting, Server Log Files

When visiting our website for purely informational purposes, technically necessary data is processed to ensure stability and security: IP address, date/time, time zone, URL accessed, HTTP status, amount of data transferred, referrer, browser, operating system, language/version.

Legal basis: Article 6 (1) (f) GDPR (operation/security). Storage period: Log files are generally deleted within 7–14 days; longer storage only occurs on a case-by-case basis (e.g. to investigate security incidents).

6. Communication via Email/Contact Form

If you send us an enquiry using a contact form, your details provided in the form, including your contact details (e.g. name, email address, telephone number), will be stored by us for the purpose of processing your enquiry and in case of follow-up questions.

The data is processed on the basis of your consent in accordance with Article 6 (1) (a) of the GDPR. If your enquiry is aimed at concluding a contract, the processing is based on Article 6 (1) (b) of the GDPR.

Your data will only be forwarded to the relevant department within the Akademie der Künste. The data will not be passed on to third parties.

You can revoke your consent at any time with effect for the future. To do so, simply send an informal email to info@adk.de. The legality of the processing carried out until revocation remains unaffected by the revocation.

The data collected in the form will be deleted as soon as your enquiry has been finally processed and there are no legal retention obligations.

7. Newsletter/Programme Informationen

When subscribing, we process your email address and any voluntary information you provide. We use the double opt-in procedure and log registrations and unsubscriptions. Legal basis: Article 6 (1) (a) GDPR; revocation at any time via the unsubscribe link. If reach measurement (e.g. openings/clicks) is carried out, it is only done with consent.

8. Online Ticket Shop (CTS EVENTIM)

Tickets are sold via CTS Eventim AG. As a rule, Eventim is solely responsible for contract processing; processing is carried out on the basis of Article 6 (1) (b) GDPR. We may receive aggregated sales statistics (Article 6 (1) (f)). For details on data processing, please refer to Eventim's privacy policy (see there).

9. Web Analysis with Matomo

We use Matomo to analyse the reach of our website. Data is only collected after you have given your consent in the consent banner; IP addresses are anonymised; Do Not Track is respected. We have concluded a data processing agreement (DPA) with the provider. Legal bases: Section 25 (1) TDDDG (terminal device access) in conjunction with Article 6 (1) (a) GDPR (analysis). Revocation is possible at any time in the consent banner.

10. Embedding of External Content (YouTube, Vimeo, Spotify, SoundCloud, Podcasts via Podigee)

As a standard procedure, we only integrate external content after obtaining your consent (two-click function in the consent banner). This means that data is only transferred to third-party providers after you have clicked. Legal bases: Section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR; legal basis for purely technically necessary retrievals: Section 25 (2) TDDDG/Article 6 (1) (f) GDPR.

YouTube (Google Ireland Ltd.)

We may use YouTube in “privacy-enhanced mode” (youtube-nocookie.com). Nevertheless, data may be transferred to YouTube/Google during playback. Further information can be found in the YouTube/Google privacy policy: https://policies.google.com/privacy?hl=en-GB

Vimeo (Vimeo Inc., USA)

Upon playback, data (e.g. IP address, device information) is transferred to Vimeo. Data transfer to the USA: Vimeo is a participant in the EU-US Data Privacy Framework (DPF); in addition, standard contractual clauses may apply: https://vimeo.com/legal/privacy/policy

Spotify (Spotify AB, Schweden) & SoundCloud (SoundCloud Limited, UK)

Upon activating the players, usage data is transferred to the respective providers; for further details, please refer to the providers' privacy policies: https://www.spotify.com/de-en/legal/privacy-policy (Spotify), https://soundcloud.com/pages/privacy (SoundCloud, in German)

Podcasts via Podigee (Podigee GmbH, Germany)

Our podcasts are hosted and delivered via Podigee; Podigee processes IP and device information for delivery/statistics in accordance with its own privacy policy: https://www.podigee.com/en/about/privacy

11. Social Media Accounts (Facebook/Instagram, X)

We maintain publicly accessible accounts. Upon visiting the platforms, providers process usage data on their own responsibility; we may receive aggregated insights.

Facebook/Instagram (Meta Platforms Ireland Ltd.)

Page Insights is subject to joint responsibility under Article 26 GDPR; Meta's “Page Insights Controller Addendum” applies. You can assert your rights against us as well as against Meta.

X (formerly Twitter)

Please note the privacy policy of X (formerly Twitter). Data may be transferred to third countries (including the USA); depending on the provider status, DPF/SCCs apply (see below for general information on DPF).

12. Data Transfers to Third Countries ( esp. the USA)

When integrating/using certain services, personal data may be transferred to third countries, in particular the USA. If providers participate in the EU-US DPF (Data Privacy Framework), the transfer is based on the EU Commission's adequacy decision; otherwise, we use EU SCCs (Standard Contractual Clauses) plus a transfer impact assessment.

13. Recipients/Categories of Recipients

  • IT/hosting providers, support and maintenance providers (order processing)
  • Payment/ticket service providers (independent responsible parties)
  • Platform providers of embedded content and social media (independent responsible parties)

14. Storage Duration

We store personal data only as long as necessary for the respective purposes. Specific storage periods are determined by legal obligations (e.g. commercial/tax law) or are indicated in the consent banner/by the services. After this period, data is deleted or anonymised.

15. Duty to Provide/Automated Decision-Making

The provision of your data is necessary for the conclusion of a contract (e.g. ticket purchase); otherwise, it is voluntary. Automated decision-making, including profiling, does not take place.

17. Update of this Privacy Policy

We update our privacy policy when the legal situation, our services or data processing change. The current status is shown above.

Please note: This English version of the German privacy policy is intended to inform and assist international visitors. The original German-language version takes precedence in any matters of dispute.

Scroll